CVE-2026-16520

Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 allows SQL Injection and Authentication Bypass. This issue affects Genian NAC V4.0: from 4.0.0 before 4.0.175Revisio...

MINI-97J9-9XG9-XCV9

Bulletin has no description...

MINI-267M-2PFX-H2RH

Bulletin has no description...

MINI-7PQM-R477-QRGF

Bulletin has no description...

MINI-FR96-652M-W9J2

Bulletin has no description...

MINI-4JGH-MF9H-V2QH

Bulletin has no description...

MINI-RJ58-F4PG-X7H7

Bulletin has no description...

MINI-6XX3-CJCP-8MX7

Bulletin has no description...

CVE-2026-77648

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass importfilteringopts, allowing an admin to fetch internal URLs from the Glance service network aka SSRF, as long as https:// or http:// is used. This API has been available only to admins since Xena, and it...

MINI-V9V6-7VWP-GJ4W

Bulletin has no description...

MINI-9MH6-GGM4-C45V

Bulletin has no description...

MINI-M7G8-J6WX-2XQW

Bulletin has no description...

MINI-8J23-3523-24C3

Bulletin has no description...

CVE-2026-70105

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

CVE-2026-49436

LinkAce is a self-hosted archive to collect website links. Prior to version 2.5.7, the Bulk Link API endpoint POST /api/v2/bulk/links accepts URLs without any format validation, allowing an authenticated user to store a javascript: URI. The stored URI is later rendered verbatim as an href in Blad...

CVE-2026-72818

NLTK (Python NLP library) is vulnerable to catastrophic regex backtracking in nltk/tokenize/casual.py. The TweetTokenizer.WORD_RE pattern contains an unbounded naked-domain label prefix [a-z0-9]+(?:[.\-][a-z0-9]+)*. Crafted input with many alternating label separators causes the regex engine to e...

CVE-2026-17170 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an allocation size...

CVE-2026-70105

CVE-2026-70105 is an information disclosure vulnerability in Microsoft Office Word caused by improper input validation, allowing an unauthorized attacker to disclose sensitive information over a network. Microsoft rates it 6.5 (MEDIUM) with user interaction required; NVD rates it 7.5 (HIGH) with ...

EUVD-2026-63682

BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton failed to escape meetingName in record-and-playback/screenshare/playback/index.html.erb when generating the screenshare playback format. A low-privileged user could store a crafted meeting name that embedded script...

CVE-2026-18420

Improper input validation in the Time Series Visual Builder TSVB plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enabl...